Updated 29 October 2026
The plain version
I collect what you give me, like your email or your messages, so I can send what you asked for and run my programs. I never sell your information or give it to brands, ever. If my AI assistant replies to you, it's always labelled as AI, and you can ask me to see, fix or delete your information any time.
Hi, I'm Cindy 🌱 I wanted this page to be one you can actually read, so here's what information I collect, why I collect it, who helps me handle it, and what you can ask me to do with it. It covers my website cindyzhu.com.au, my Instagram accounts, my Facebook Page, my emails, my free guides and AI System Club.
It also covers my app, Cindy Zhu Publisher, which I use only to manage my own Instagram account and Facebook Page through Meta's official tools.
When I say "I" or "me", that's me, Cindy Zhu, a sole trader based in Melbourne, Australia. I'm the one responsible for your information, and you can reach me any time at hello@cindyzhu.com.au.
You never have to give me your email. I just need it to send you what you asked for.
Some privacy laws, like the GDPR in the EU and UK, ask me to name a legal reason for each use. Here they are.
No AI or automated tool makes important decisions about you on its own, meaning anything with a legal or similarly significant effect on you. Those are always made by me.
Some replies on Instagram are automated. When you comment a keyword, a tool called ManyChat sends you the link you asked for. I'm also setting up an AI assistant, which uses Anthropic's Claude, to help me answer messages. At first it only drafts replies for me to check. Later it may send some simple replies itself. Either way:
To plan content, I look at public information from Instagram business and creator accounts, like profile details, follower counts, public posts and captions, all things anyone can see on a public profile. I use Instagram's official tools and research tools for this. I only use information those accounts have made public, I use it only for my own research, and I never sell it or share it. I delete it within 12 months. If it's about you and you want it gone sooner, just email me and I'll delete it.
Anything I get through Meta's official tools, I only use for the reasons on this page. I don't sell it, license it or buy it, and I delete it when you ask or when I no longer need it.
I run a small business, so a few tools and people help me behind the scenes. They only use your information to do their job for me, under their own security and privacy terms.
I never give your personal information to brands I partner with. They only see combined, anonymous numbers, like total views or which countries my audience is in. If I ever run a giveaway with a brand where your details would go to them, I'll ask you first.
My guides link to other websites and tools. Some are affiliate links, which means I may earn a commission if you buy, at no extra cost to you. Those sites have their own privacy policies and may use cookies to track the referral. Once you're on their site, their policy applies. I can't control how they handle your information, so I'm not responsible for it.
My website doesn't set cookies, and it doesn't track you across other sites. When a page loads, your browser fetches fonts from Google, which can see your IP address. Some browsers send a Do Not Track or Global Privacy Control signal. There's no cross-site tracking here for it to switch off, so every visit is treated the same either way.
I don't sell your personal information, and I don't share it for targeted advertising (the kind of ads that follow you around other sites).
I'm based in Australia. Many of the services I use store information in the United States, and some in other countries. Some of my contractors work from other countries, including in Asia. So your information may be handled outside the country you live in. Where the law asks for extra protection, I rely on safeguards like the European Commission's standard contractual clauses (and the UK's version), which are built into my main providers' data processing terms. For some providers, I rely on their certification under the EU-US Data Privacy Framework instead.
I use reputable providers, use two-step login on my main accounts, keep passwords and access keys private, and give my team access only to what they need. No system is perfectly secure, so I can't promise nothing will ever go wrong.
If a data breach is likely to cause you serious harm, I'll tell you as soon as I can, with what happened and what you can do. I'll also tell the relevant regulator where the law requires it, for example within 72 hours in the EU and UK.
Wherever you live, you can ask me to:
If you're in the EU or UK, you can also object to how I use your information, ask me to limit it, or ask for a copy in a common format. Where I rely on your consent, you can withdraw it at any time, and that won't affect what happened before.
If you're in India, you can also nominate someone to act for you if you pass away or can't act for yourself, and you can complain to the Data Protection Board of India.
To make a request, email hello@cindyzhu.com.au or follow my data deletion page. It's free. I may ask you to confirm it's really you, so nobody else can get your information. I'll reply within one month. If a request is complicated, I may need longer where the law allows, and I'll tell you why.
If something about how I've handled your information doesn't feel right, please email me so I can put it right. You can also contact your privacy regulator at any time, for example:
My content, emails and programs are made for adults. Please don't sign up if you're under 16, or under 18 if you live in India. You need to be 18 or older to buy anything from me. I don't knowingly collect information from children under 13. If you think a child has given me their information, tell me and I'll delete it.
I only share your name, words or photo as a testimonial if you've said yes. I ask about your words and your photo separately.
What you post in the community can be seen by other members, so only share what you're happy for them to see.
That's me, Cindy Zhu. For any privacy question at all, you can reach me at hello@cindyzhu.com.au.
If my business is ever moved into a company I own, merged or sold, your information would move with it and stay covered by this policy, and I'd let you know who is looking after it.
If I change this policy, I'll update the date at the top. If it's a big change and you're on my email list, I'll let you know by email.
Thanks for reading all the way to the end. If anything here doesn't make sense, just email me and I'll happily explain 💌